AAA的配置（转）

!
boot system flash bootflash:c6msfc2-psv-mz.121-7a.E1
no logging monitor
aaa new-model
aaa authentication login LOCAL_AUTHEN local
aaa authentication login VTY_AUTHEN group tacacs+ local
aaa authorization exec LOCAL_EXEC_AUTHOR local
aaa authorization exec VTY_EXEC_AUTHOR group tacacs+ local
aaa authorization commands 15 LOCAL_COMM_AUTHOR local
aaa authorization commands 15 VTY_COMM_AUTHOR group tacacs+ local
--More--  aaa accounting exec default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
tacacs-server host 56.0.30.8 key ciscokey
tacacs-server host 56.0.30.9 key ciscokey
!
line con 0
password 7 01100506
authorization commands 15 LOCAL_COMM_AUTHOR
authorization exec LOCAL_EXEC_AUTHOR
login authentication LOCAL_AUTHEN
transport input none
line vty 0 4
access-class 112 in
password 7 111C0B121B1106
authorization commands 15 VTY_COMM_AUTHOR
authorization exec VTY_EXEC_AUTHOR
login authentication VTY_AUTHEN